Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
File:                     uZDIXPoM7VKDY0mX56SqjOeDbbY.mft (raw, json)
Hash identifier:          CGqhIvaSI0xKY/FVlMCGLWYtN29Xd0G4upF28nwk9Us=
Subject key identifier:   C6:88:85:B7:2A:E5:58:AD:92:06:6A:F3:9C:D0:8C:7F:86:E9:2B:87
Authority key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
Certificate issuer:       /CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Certificate serial:       01976D06CAE6867BCB7F402E6B083F89EE7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 06:00:51 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:51 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:51 +0000
Files and hashes:         1: fhezsDFSO4Gg3v-2EzPO1VJN5k4.roa (hash: Hb04qv2mCfUH3swl1KX6h239vXc62PCAwsB9N2VdCD0=)
                          2: uZDIXPoM7VKDY0mX56SqjOeDbbY.crl (hash: 6KC3izs932fm6ZiBu8aIArJvcRvKVToKAAOKFhKcofo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:ca:e6:86:7b:cb:7f:40:2e:6b:08:3f:89:ee:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
        Validity
            Not Before: Jun 14 06:00:51 2025 GMT
            Not After : Jun 15 06:00:51 2025 GMT
        Subject: CN=c68885b72ae558ad92066af39cd08c7f86e92b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1f:70:ff:56:21:0a:27:1e:5d:aa:15:5f:a2:
                    fc:3e:7f:b7:5f:89:84:9a:f0:6d:a4:09:a1:9c:d5:
                    fe:7e:53:3a:96:77:89:0d:7a:f3:bc:24:82:d3:12:
                    e0:ff:7e:2a:0c:5d:4b:ad:4e:db:a3:ee:82:b6:8f:
                    02:3d:13:7d:ae:4b:41:2b:7a:e9:27:ce:a5:d6:ec:
                    92:c8:74:15:e7:0b:8f:b3:8d:4e:70:0b:2c:11:65:
                    3a:c8:2e:6a:3d:06:f3:f7:60:cf:69:ef:86:27:ae:
                    20:b1:a4:f5:5c:f7:50:77:70:2f:ad:f9:9d:28:50:
                    63:92:e0:90:5f:ac:b4:75:79:ac:04:bf:6c:6b:eb:
                    9d:35:59:86:ee:04:f9:cb:42:3a:a2:57:57:3e:02:
                    d8:34:82:2f:c8:8d:1f:1c:23:ab:4c:d3:cb:ac:99:
                    e5:5e:f9:b5:f3:07:d3:39:68:38:23:a1:49:39:c7:
                    66:06:1c:49:56:b9:ea:61:49:e1:e0:7a:fd:4b:6a:
                    43:fe:2f:c4:10:a8:2c:f6:60:2d:24:0b:18:51:85:
                    eb:26:da:63:c1:24:09:01:55:6a:2d:b2:bb:48:d9:
                    0f:be:93:ef:73:1e:dd:11:e7:bf:74:29:87:88:d1:
                    04:68:b9:0b:d3:21:48:f7:f2:68:03:88:66:af:75:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:88:85:B7:2A:E5:58:AD:92:06:6A:F3:9C:D0:8C:7F:86:E9:2B:87
            X509v3 Authority Key Identifier:
                keyid:B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:fe:84:bd:72:d6:7f:31:35:de:44:ae:81:78:01:f0:14:90:
         2c:44:d3:17:23:cd:0d:1d:54:a2:e3:fe:05:4a:1b:ae:03:d7:
         8f:b5:ea:99:06:4f:89:55:36:2f:4d:81:d5:2b:b2:eb:6c:3a:
         38:81:d7:6f:ca:64:cd:66:1d:5c:e9:72:9c:32:9a:67:4f:33:
         e3:b0:9c:36:f1:d5:2f:6c:4b:db:11:4e:27:90:8b:ed:e5:41:
         a1:7a:96:ff:af:7d:21:f0:56:d7:5c:b8:1b:2c:05:a0:38:bb:
         06:05:a8:27:4b:36:7a:58:1f:f8:a5:54:b4:7c:bb:1d:60:57:
         d2:20:17:26:9b:cb:6f:e5:30:64:39:4f:c6:4a:81:41:6b:89:
         69:d9:98:9d:39:da:f2:5b:48:95:3a:14:7e:da:21:f1:69:26:
         66:82:9e:bb:50:58:1c:58:69:dc:d9:df:6c:a0:71:3c:c9:49:
         e3:44:ff:95:d2:5c:b5:c3:98:a0:23:d6:ff:2b:c2:c3:e8:21:
         fa:3e:39:e4:26:87:dc:94:4a:f8:48:d4:ff:99:4a:36:de:bc:
         be:c8:68:c7:98:ff:92:32:c7:73:fa:d1:3c:81:b0:4b:54:83:
         4b:d5:19:98:d0:24:11:5c:37:39:2c:63:71:b5:07:bf:7c:36:
         03:32:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:54:05 2025 by rpki-client